Privacy Policy

The free score

• Your photo is decoded and analyzed inside your browser. It is not sent to our servers.
• No sign-in is needed. Derived data is sent to our server for scoring: normalized landmark coordinates, proportion measurements, photo quality values, the selected rating standard and a hash of the file. The photo itself is not sent.
• The free scoring request does not save an analysis record, photo or measurements to your account. The result remains in the current page while you view it.

Free measurement tools

• The face shape, symmetry, eye tilt and photo quality tools process the photo and measurements inside your browser. Using these standalone tools does not send the photo or facial geometry to our server.
• One photo can be reused across these tools during the current browser session. Nothing is written to local storage or your account. Manual eye-corner edits only affect the eye-angle tool and its download, not an existing PSL score.
• The free PSL test and Looksmax report are separate flows with their own photo selection. The free PSL test sends measurements to the scoring service as described above; tool sessions are not carried over to either flow.
• Result cards are created on your device. They contain your measurements and your photo. Downloaded images are under your control and cannot be remotely revoked if you share them.

The Looksmax report

• When you unlock the report from your free result, that photo and its measurements are kept in your browser’s local storage (IndexedDB) on this device, so you don’t have to choose it again after signing in and paying. Nothing is uploaded at that point. The copy is deleted when the report is generated, when you replace the photo, or after 24 hours. Photos you choose in the report flow itself stay in page memory and are lost if you reload.
• When you generate a Looksmax report, its measurements, selected rating standard and scoring version are saved with your account so you can view the report again. These records are associated with your account, not anonymous. You can delete them from your account page.
• The Looksmax report sends downscaled copies of your front photo and, if you add one, your side-profile photo to an AI model provider through OpenRouter to describe lighting, skin, presentation and the profile. We use zero-data-retention routing and do not allow the provider to train on your photos.
• Report photos can be stored in private object storage (Cloudflare R2) and linked to your account so you can view them again. If photo storage is unavailable, the report is kept without saved photos. Deleting the report or your account removes its saved photos and analysis data.
• The styling part of the report (hairstyle previews, colors, skincare and plan) uses your front photo and the facial landmarks measured in your browser. The photo is sent through OpenRouter to an AI model that reads your coloring, hair and visible skin, and to an image model (Google Gemini) that creates hairstyle and styling previews of you. Each preview is checked by a second model call and is only kept if it is appropriate and still shows the same person. The previews, the landmarks and the written report are stored with your report and are deleted with it or with your account.
• Reports are private by default. If you create a share link for a report, anyone with that link can see the whole report, including your photos and the generated previews. Stopping sharing makes the link stop working; copies someone already saved are outside our control.

Facial geometry is sensitive data

Measurements of facial geometry can be considered biometric data under laws such as the GDPR and the Illinois BIPA. We process them only to compute and reproduce your score, never to identify you or anyone else, and only after you give explicit consent. The consent version and time are recorded with your account.

Account data

• We use Google sign-in (via NextAuth). We store your Google account id, email, display name, avatar URL and preferred language; we do not store Google access tokens.

Analytics

• We use Google Analytics 4 to understand how the site is used: which pages are viewed, how far visitors get in the score and report flow, purchases and sharing. It sets first-party cookies (such as _ga) that give your browser a random identifier.
• Analytics never receives your photo, your measurements or your score. Google processes this usage data on our behalf under its data processing terms, and Google Analytics 4 does not store IP addresses.
• You can opt out with the Google Analytics opt-out browser add-on or by blocking the googletagmanager.com domain. The site works the same without it.
• We also use Microsoft Clarity for heatmaps and anonymised session replays that show how pages are scrolled and clicked. Your photos are masked before recording and never reach Clarity. It sets first-party cookies (such as _clck and _clsk); Microsoft processes this data under its privacy statement. Blocking the clarity.ms domain opts you out.

Your rights

• Delete everything: your account page has a one-click delete that removes your account, measurements, reports and any saved photos.
• Questions or requests about your data: support@trypsl.com.

Age and other people

TryPSL is for adults only. Do not upload photos of anyone under 18, and do not upload photos of other people without their explicit permission.